Privacy policy

ORQO is a platform for managing cash-on-delivery orders. This page says what we take, why, who sees it and for how long — plainly.

Last updated: 2026-09-05 · ORQO — Algeria

What we collect

·The order data arriving from your connected sources: customer name, phone, address, product, price and quantity.
·Your account data: your email, store name and phone number.
·If you connect a Facebook page or an Instagram account: the page id and the access token Meta issues, and for each customer who writes to the page their id, name, the text of their messages and their time.
·We don't collect or handle any bank-card data — cash on delivery by its nature happens between the customer and the carrier.

·To confirm orders by phone, create parcels at the carrier, track their status and compute your profit.
·Page messages: to answer your customers' questions about price, availability and delivery from your own data, and to place their orders in the confirmation queue your team confirms by phone.
·We use it for nothing else, do not sell it, do not share it with advertisers, and train no model on it.

·You and the team members you invite yourself, no one else.
·Each store's data is isolated at the database level: one merchant cannot see another's data, even if they try.
·The carrier you choose receives only the parcel data — name, phone, address and amount — because it can't deliver without them.
·The ORQO team opens your store's data only with permission you grant when asking for support, for a limited time that expires automatically.

·Supabase: database and sign-in. Vercel: platform hosting (Paris). Resend: confirmation and alert e-mails.
·Meta: messages of the Facebook and Instagram pages you connect, and ad spend if you connect your ad account. Shopify, YouCan and Google Sheets: the order sources you choose to connect.
·The Algerian carriers you choose: DHD, Yalidine, ZR Express, Noest and others. Each receives only its own parcels.
·Every transfer between them and the platform is encrypted (HTTPS). The platform carries no advertising tracker and no external analytics tool.

·Order data stays as long as your store exists: it is your books. Orders in the trash are not deleted automatically; you delete them.
·When your store is deleted, all of its data goes with it — orders, products, conversations, connections — with no copy kept by us, except database backups, which are replaced within thirty days at most.
·Page conversations stay as long as the page is connected. Disconnecting the page from the platform, or removing ORQO in Facebook settings, deletes them immediately.
·A request to delete a customer's data is carried out within thirty days at most, and usually the same day.

·Two read-only permissions: read orders (read_orders) and read products (read_products).
·Orders are used to confirm, ship and track them. Products are used to import your catalogue and follow stock per size and colour — this is optional: if you do not import your products, we do not read them.
·And we cannot change anything in your store: no order, no product, no price, no customer. Both permissions are read-only.
·You can withdraw access at any time by removing the app from your store. Shopify notifies us after 48 hours and we delete your store's connection and what reached us through it.
·Shopify customer requests (customers/data_request and customers/redact) are received and carried out: on erasure we wipe what identifies the person from their orders.

·If you connect a Facebook page: to see your pages, subscribe to their messages, and read and answer the page's messages. Nothing about your personal account or your friends.
·If you connect a professional Instagram account: reading its messages and replying, handled the same way.
·Your page's customer messages are kept inside your store alone and treated like your orders: seen by the team members you choose, never by another merchant.
·The automatic reply reads price, availability and delivery from your own data at reply time, and sends your customers' data to no external service.
·If you connect your ad account: read spend only (ads_read). We cannot create or edit an ad.
·You can disconnect the page from inside the platform at any time, or remove the ORQO app in Facebook settings — Meta then notifies us, we delete the connection and the conversations that came through it, and this page shows you the state of your request and its confirmation code.

·If a customer asks to know what's stored about them or to delete it, send us the request and we act on it within thirty days.
·On deletion we erase what identifies the person — name, phone, address — and keep the order's figures, because erasing them would change your accounts retroactively.
·A customer who wrote to your page can ask for their conversation to be deleted the same way.

·Two cookies only: one keeps you signed in, the other remembers your language. No advertising cookies, no cross-site tracking.

For any question about your data or a deletion request: privacy@orqo.shop or Support WhatsApp. We reply within two working days.